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Preface 



On 29 June 2009, the most serious railway accident involving civilian mortalities 
that has ever occurred in peace time in Italy took place just outside the station of 
Viareggio. At 1 1:50 p.m. the first in a convoy of 14 railroad tanks containing liquid 
petroleum gas (LPG) derailed because the second axle of the first truck snapped 
free, which then caused the derailment of the goods train Trecate-Gricignano in 
transit along the fourth line of Viareggio station at a speed of about 94 km/h. The 
passenger platform of the fourth line stopped the first railroad tank from falling 
inside the station and this kept all the trucks attached to it in an upright position for 
the moment, which was a stroke of luck inside the wider tragedy as it limited the 
damage caused to some extent. However, once the convoy went beyond the 
platform, the first tank fell on its left hand side bringing down some other trucks 
in its trail. 

The first tank continued on its way sliding along the ground on its side and it 
struck against an element of the railway line and was torn open, thus allowing the 
entire load of LPG contained in it to escape into the air. Inside the container LPG is 
in a liquid state, but, having been freed into the atmosphere, it changes into a heavy 
gas which floats low in the air along the ground and can filter under a door. Few 
minutes after the dispersion of the load the raging inferno began which caused the 
death of 32 people. None of the victims were on board the train. 

On 2 November 2011, after two years of intense investigations the case appeared 
in court for the three-day pre-trial hearings on special evidence. However, when this 
pre-trial conference was wound up on 4 November a problem of method had 
appeared. 

Its closing was dramatic. Family members of the victims of the tragedy were 
present in the courtroom. 

It is enough to read the conclusions of the Prosecutor given here in adapted form: 

In accordance with Article 231 of the Italian Code of Criminal Procedure, I request the 
substitution of the forensic experts on account of their negligence [...]. 

We are speaking here about 32 people who have met their deaths. 

We do not embrace any particular theory and we welcome anyone who says that we have 
made mistakes because we want our backs to be put up against the wall! 
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The premises are false and our duty to the truth whatever implications that may have on the 
trial has not been carried out. 

No evaluations were even done using the mathematical models that we have acquired after 
two years or more of work [...]. 

How can we accept a report whose findings are full of holes and replies (from the expert 
witnesses, editor’s note) which so clearly seek merely to avoid the objections which 
have been brought up by the victims’ lawyers? 

I quote (the Public Prosecutor cites the expert witnesses named by the Judge, editor’s note): 
‘We have not included the evaluations because we rejected them’. 

[. . .] Your Honor, it is as if we were to convict someone because he looks vaguely like the 
person who carried out the robbery and we do not even stop to think that in that moment 
he was not to be found in the town of Lucca, for example, where the robbery took place 
but was elsewhere. 

If we were not to allow that a DNA test has not cleared him of all accusation how would we 
go about sentencing him. 

Would we sentence him because he is a ‘look-alike’? 

A look alike! 

Nothing is certain here, everything is up in the air, nothing has been demonstrated. What 
universal or natural law can justify the event? 

None of us is in love with a thesis, but we want to be defeated. We know very well that 
during a penal trial the consultant’s work can condition that of the judge and put his 
conclusions on the fast track. In this case, we cannot allow that to happen. 

We must leave no doubts. 

We cannot leave even the shadow of a doubt. 

Two contrasting technical hypothesis concerning the reconstruction of the 
events is the possible worst thing that can happen to a judge during a trial. Different 
positions immediately trigger animated discussions and excited disputes between 
the expert witnesses that frequently leave the non-technical people — lawyers, 
prosecutors, judge — excluded from the scrutiny. Mostly, technical consultants 
and expert witnesses talk to each other in a language that is virtually incomprehen- 
sible, while the judge has no alternative but to ask them a direct question the reply to 
which will, in one way or another, relieve him of the burden of having to make a 
decision on questions he scarcely knows about: “what is, in your opinion, the 
probability that what you maintain did actually occur?” 

The problems inherent in the reconstruction of industrial accidents should of 
course be set out in a completely different way. The judge, the public prosecutor 
and the lawyer need to be put into a position where they can understand and be able 
to formulate their own understanding of the evidence, which can be guaranteed by 
the correct scientific reasoning of the expert witness. The expert witness must not, 
therefore, concentrate on the “details,” interpreting them as he sees fit and he must 
never, just because there is a single piece of evidence that seems to move in the 
direction of a hypothesis that he has formulated, consciously or unconsciously 
neglect others that would clearly refute it. 

In addition to this age-old dilemma concerning the incomprehensible and often 
irrefutable statements set forth by many expert witnesses in the law courts, there is 
another problem that needs to be faced. This derives specifically from the great 
confusion that is created whenever a lawyer speaks in terms of a causal link 
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between behavior and event (having clear in his mind Article 40 of the Italian Code 
of Criminal Procedure), while the expert witness is speaking in terms of the causal 
relationship between evidence and event, initially, and then between connected 
events. 

These two approaches, which we will distinguish as judicial (the first) and 
evidential (the second) reasoning must in some way be held separate to avoid 
dangerous mutations, but will also have to come together sooner or later to reach 
the proof about a fact or an event, proof of the anti-juridical behavior of the 
offender, who is to be held guilty and punished. 

These are what we could call the missing gaps concerning the reconstruction of 
criminal liability in the field of industrial accidents, and, starting from there, this 
book sets out to take the reader not used to technical and scientific themes by the 
hand and map out the “construction” of a method to be used whenever he needs to 
evaluate the quality, the effectiveness and above all the precision of the work 
carried out by the expert witness. At the same time, however, the method proposed 
in this book also helps the reader to understand that he cannot expect the expert 
witness to think in terms of the causal link between behavior and event — that is, at 
least, until the moment is right. 

This book is set out in two parts. 

The first is called: “Judicial thinking and evidence in the field of industrial 
accidents,” and it is divided into four chapters. 

In the first chapter we lay down the foundations of how to reason from evidence, 
beginning, initially, from the idea of demonstration, verification, guarantee and the 
level of knowledge that can be acquired based on the use of the three possible forms 
of reasoning (deductive, inductive and abductive). We will also discuss the con- 
cepts of probability and uncertainty connected with the use of reasoning methods 
that are purely inductive. Particular analogies are outlined between the methods 
applied in the analysis of a crime scene and those that are used in the gathering and 
analysis of information on the scene of an accident. 

In Chap. 2 we make a brief introduction to the causal relationships that allows 
judge, as well as prosecutor and attorney in their own supporting roles, to recon- 
struct under correct enlarged view the penal responsibility in the field of industrial 
accidents that involve several responsible people who are persons in charged for 
complex and multilevel interconnected decision making process. 

In Chap. 3 we introduce the principles from which it is possible to establish 
whether an effect — to put it simply — has been determined by a particular cause. 
The first thing we have to do here is to establish what we mean in scientific terms 
when we say that “something is the cause of something else.” This allows the reader 
to begin at least to understand the concept of phenomenological or natural cause 
which connects two events in an accidental chain that has been correctly 
reconstructed. We will be reflecting therefore on potentialities — too frequently 
unexpressed — that derive from the correct application of scientific laws in the 
reconstruction of a happening. We will be able to see thus that, although it is almost 
a necessity to talk in terms of probability in the field of forensic pathology, in that 
the human machine is so complicated that we can never be fully certain about the 
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phenomena involved — the situation is totally different nevertheless in the field of 
industrial accidents. 

As far as accidents are concerned, whether we are talking of an industrial plant, a 
machine or a means of transport, what “regulates” the system under study are “quite 
simply” the laws of physics, of chemistry or, on a specialized level, classical 
mechanics, metallurgy and the science of materials, and so on. We have to try to 
clarify, therefore, what is meant by scientific method, which, when it is correctly 
carried out, is the only process able to construct scientific proof, that is to say the 
only type of proof which is in itself “beyond all reasonable doubt.” We will see the 
enormous difference between a mere piece of experimental evidence (which is 
defined as “proof’ to the extent that it is erroneously considered as such even in 
juridical language) and the real scientific proof in itself. We will ascertain that it is 
frequently just such an absence of scientific method that results in having to 
interpret the results of a scientific test with a statistical approach or inferences 
drawn from “probability theory” (in jurisprudence often called Bayesian Inference) 
even where there is absolutely no need to do so. 

All this leads the reader to Chap. 4, where we take up again the concepts 
introduced in Chap. 1 about the way of thinking used in the scientific field. Here, 
we demonstrate that the reconstruction of an accident, although it might be logically 
coherent, may not be consistent with the facts. This happens whenever we recon- 
struct a complex accident without regard for a rigorous scientific method, for it is 
that alone which by its intrinsic nature can guarantee the truth of the reconstruction 
of the facts because it is expandable and verifiable. 

We underline the importance to be found in analyzing the “traces” that the 
system under study leaves as it interacts with the surrounding environment; how it is 
from this that we move on to infer what took place in the reality of the facts. We will 
show how valuable such traces can be when they are numerous and correctly 
interpreted as effects of a particular phenomenon. 

Once this fundamental concept has been grasped we can finally be able to move 
on to the analysis of an accident using a Sequence of Event Analysis or SEA. We 
can see how, by applying a sort of backtracking analysis, the expert is able to extract 
from the available traces all the information — generally inaccessible to those not 
expert in the subject — which allow him to interpret such traces as the effects of 
precise phenomena. 

Based on the iterative three-phase method as introduced in Chap. 3 we will see 
how it is possible — starting from an interpretation of the traces — to reconstruct a 
logically coherent sequence of “key events.” At this point the sequence of events 
needs to be counter-verified so it can reach the superior status of a sequence 
consistent with the facts, that is to say the only true sequence as against those that 
are coherent or logically possible. 

At the end of Chap. 4 we face the problem of how to (re-)connect the conduct of 
one or more harmful events , recognizable in the sequence of consistent events , 
which we have (re-)constructed by the application of a first level SEA. We will show 
that once the first skeleton has been defined (i.e., the first level SEA), it is then 
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possible correctly to find the origin in each key event of the conduct that has 
influenced it from a causal point of view. 

Having reached this position, we need to face another dilemma. That is, what 
types of subject we have to reconstruct the causal links between conduct and 
harmful event. 

This problem leads the reader towards the second part of the book, called “From 
the Construction of Scientific Proof to Tracing Responsibility,” which contains 
three chapters. 

Chapter 5 takes up the conclusions drawn in the first part of the book and the 
doubts that came up at the end of Chap. 4 concerning the limits in application of 
first-level SEA, which are inevitably posited when you are proceeding from the 
reconstruction of the accident to the subsequent phase of tracing responsibilities. 
From the first-level SEA scheme we need to pass on to another scheme complete 
with a further level of analysis, which we will call level of conduct. However, 
before we understand the details of the level of conduct the reader needs to get used 
to the idea of system failure. For this purpose, we have to deal here with a theme that 
has been introduced only recently into the literature on industrial accidents, known 
as organizational accidents. Beginning with the theories about accidents that were 
valid in the 1950s first and then the 1970s, we have to focus on what has been put 
forward since the 1990s concerning the analysis of disasters as a consequence of 
errors or failures distributed on three different levels of organization: active failures 
(or failures of the “last link in the chain”), organizational failures and inter- 
organizational failures. 

As examples we have to examine three serious accidents which took place in 
civil aviation and which are considered fundamental in the literature on organiza- 
tional accidents. 

The three different levels of system failure described in Chap. 5 are therefore 
formulated in Chap. 6 as the three sub-levels of conduct that complete the multi- 
level SEA analysis to verify the main conclusions of the investigative commission. 

Finally, Chap. 7 sets out to practice the method learnt in previous chapters, by 
discussion of two real cases authors faced and solved with SEA approach supported 
by tri-dimensional graphic dynamic reconstruction of the accident. 

The conclusions drawn in this book are made as a contribution towards the 
solution of doubts and false myths concerning the application of science in the field 
of forensics. If it is evident today that these are already interpreted as techniques 
able to come up with precious proof, it is equally true as well that, by applying the 
right methods, we will be able — at least when limiting ourselves to the analysis of 
industrial accidents — to evaluate when and if our reconstruction of the facts goes 
beyond all reasonable doubt. 
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Chapter 1 

On Judicial and Evidential Reasoning 
in the Field of Industrial Accidents 



Introduction 



The problem which will lead us through all seven chapters of this book sets off here 
with a forceful metaphor: the crime itself is like a building that has collapsed before 
the trial. The public prosecutor has to rebuild it as it was before and the judge has to 
evaluate the conformity of this to the original. If he is lucky, the public prosecutor 
finds the ground, the cement, the bricks and the nails. But that is clearly not enough: 
to build or rebuild a house you need a plan. This plan is the hypothesis. But what 
hypothesis are we talking about? 

It is clear, the evidential structure moves from the reconstruction of the happen- 
ing. We can state more generally that the hypothesis often comes out of a relevant 
effect that moves the inquiry and proceeds to the search for and gathering of the sets 
of elements and information that consent us to represent the happening in its causal 
dynamics. 

These are still just a few lines, but some few key words in italics here and 
there just above trace for the reader the whole or almost the whole supporting 
structure as regards reasoning from evidence, whose purpose is the verification of 
the truth of the facts initially and then of responsibilities. 

If we put the basic concepts we have set out above into the right order, in the 
criminal field the verification of responsibility hinges on the principle that there is to 
begin with a legally relevant fact from a criminal point of view that is attributable to 
the conduct of a subject who has acted against the law in an blameworthy way. 

In Chap. 2 that follows we begin to face the problem of verifying responsibility, 
here introduced only briefly. This is a process structured from a way of thinking that 
we will define as juridical. The fact that there is a crime can be given shape only 
based on a harmful event on the one hand in the presence of anti-juridical behavior 
on the other, and by the causal relationship between them both. 

Of course these concepts are absolutely clear to any criminal lawyer, in that they 
are the basic “instruments” that he has at his disposition on which he will have to 
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base his defense or prosecution of the accused. The two terms, behavior and 
harmful event need to be connected as the elements of an “equation” constructed 
based on a logical framework of this type: “if behavior X [is true] then event Y [is 
true]” 1 

We will learn in next chapters how to set the determination of concurrent causes 
and the “method” by which they can be identified. For now, it is enough to know 
that we not only have instruments of this kind capable of analyzing the causal 
relationship between behavior and harmful event, but that they are also very 
effective. 

The type of juridical reasoning that we have been speaking about so far, carried 
out to ascertain responsibility, becomes more complicated in concrete cases when 
we ask ourselves how we can be certain beyond all reasonable doubt that: 

1) the conduct in question can really be attributed to the accused 

2) such behavior is certainly a cause or a concurrent cause of the concrete harmful 

event. 

If we demonstrated that Person definitely passed through Place B at a certain 
time , it would then be reasonable to suppose that he could not have been at that time 
in Place A as well. 

This is, in fact, the framework of the alibi which exonerates Person from having 
committed the criminal fact. 

For example, let us imagine that we are setting off on the search for traces 
confirming the presence of Person in Place B: what could they be? A receipt issued 
for a hotel room? We could object, however, that an accomplice of Person’s, who 
bears a resemblance to him, gave the receptionist a well-forged document 
containing false personal details. Now, the question could be resolved by looking 
at the film footage in the hotel’s video cameras. On the other hand, however, we 
would still be in some doubt as to whether the accomplice might have carefully 
disguised himself to trick the eye of the video camera. 

The investigator does not want to give in, but he understands that he needs to 
increase the level of credibility of his hypothesis. He thinks — if it is true that Person 
travelled from Place B to Place A on board an airplane (there is a boarding card 
given to him which testifies to this), it will surely be possible to verify the 
movements of the “true” Person through the airports of departure and arrival. The 
investigator knows that the airport of arrival is outside the European Union in the 
USA. From this information he formulates a hypothesis which satisfies him more in 
terms of its degree of certainty, and he decides to carry out a test of verification. His 
hypothesis is that on his arrival in the USA, Person (or a simulator of Person) must 
have passed the US Public Health Immigration & Naturalization controls. Here the 
authorities will not only have checked his passport with much greater care than the 



1 Note that, in logic, the structure of a conditional proposition does not need to specify that it “is 
true”; that is to say the same phrase would normally be written: “If X, then Y” with the implicit 
consideration that both event X and event Y are true. Nevertheless, to avoid any incomprehension 
we presently prefer to integrate the text by adding the specific unnecessary phrase “is true.” 
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receptionist at the hotel (they are far more competent in deciding whether a passport 
has been forged), but above all the investigator also knows that an electronic display 
will have recorded his fingerprints. This recording is still recorded in the data 
archive of the computer’s memory, which is available for his use from his American 
colleagues: all he has to do is verify them. 

In this simple example, we see an increase both in the number of traces that 
have to be collected to broaden as far as is possible the hypothesis to be verified and 
also the degree of certainty sought-after to validate the hypothesis by using a 
reliable test. 

However it is just as evident that the process the investigator sets up cannot leave 
the reconstruction of events (Person’s movements) out of consideration: these are 
organized into a repeatedly (re-)formulated sequence which becomes increasingly 
refined as it is put into precise chronological order in agreement with a precise 
spatial organization (e.g., Person set off from the hotel to the airport at such and 
such a time and on that given day). This sequence needs to be proven based on the 
correct interpretation 2 of the traces that have been collected (i.e., the elements 
analyzed by the expert that identify Person’s presence), which must all be corrob- 
orated by a high degree of precision and proof. 

We will have an in-depth look at this last aspect in Chap. 4: for now it is enough 
to consider that the way of reasoning we have just described, which we could call 
evidentiary to distinguish it from its judicial counterpart, is the type of process that 
is set up to (re-) assemble brick after brick the “building” based on its “plan” which 
is unknown at the beginning of the inquiry. 

This is another all-important concept that we will be following through the book: 
to carry out our job, which is to ascertain who is responsible, we need to first 
reconstruct the happening, i.e., try to set in line the events that from now on we will 
call key events. 

This reconstruction of the events is a very delicate affair: as we have seen in the 
simple example above, from the correct identification of the sequence of events — 
on condition that it can be proven — we may or may not be able to derive strong 
implications about the responsibility of a particular individual. 

To get a technical understanding of what the reconstruction of an incident really 
means, K. L. Carper 3 explains that it is a process directed towards the determination 
of the order and timing of important events that have led in the direction of the final 
event. 



2 We speak about the interpretation and not merely the collection of traces because as they grow in 
complexity they will need an agent capable of interpreting them, the field expert, who will be able 
to give them a consistent explanation. This is the delicate passage that enables us to turn the traces 
into evidence. If you think about the simple example of Person’s fingerprints or, even more banal, 
the manufacture of his passport, you will see that both the fingerprint and the photograph on the 
passport are to be considered elements that can testify Person’s “presence” in a place. However, 
only an expert witness is able to evaluate potential efforts in falsification on one or the other 
element. 

3 K. L. Carper ed., Forensic Engineering, 2 nd ed., CRC Press, Boca Raton 2001. 
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In carrying out this type of analysis, the investigator usually works backwards 
from the moment of the incident itself: what the investigator (or in this case, the 
forensic engineer) has to determine is the sequence of events that took place starting 
from a definite starting event, or trigger event, leading to a definite event called 
final event representing the end of the temporal line describing the incident. All 
this is done basing the work essentially and exclusively on the comprehension of 
the facts. 

In the same way, R. K. Noon 4 remarks that the conclusions of an inquiry using 
the techniques of forensic engineering should be carried out basing the efforts on 
the facts of the analysis and not on mere conjectures. If the facts have been set out in 
a logical, systematic way, the conclusions should be almost evident in themselves. 

Conclusions based on other conclusions or hypotheses formulated in their turn 
on a few selected facts or very general principles are to be considered merely “a 
house of cards.” 



The Idea of Demonstration and the Three Forms 
of Reasoning 

Part of the process through which we acquire any type of knowledge is by our 
power of reasoning. There are many ways by which we reason and debate with 
ourselves to arrive at certain conclusions, and some of these processes seem more 
certain and convincing than others. Certain approaches to thought seem to show 
that in cases where particular preconditions are accepted a distinct conclusion must 
necessarily follow. Such a way of thinking is called deductive. Correct deductive 
reasoning shows that when the preconditions are true, the conclusions are as well. 
Deductive reasoning is historically connected to Aristotelian syllogism, which is, in 
fact, the form of reasoning that accompanied our research and discovery of the 
world for 2000 years. 

To clarify what we mean by valid deductive reasoning it will be enough to refer 
to a famous example: 

All men are mortal ( main premise ) 

Socrates is a man ( minor premise) 

Socrates is mortal ( conclusion ) 

As will be clear, the truth of the conclusion is guaranteed by the truth of the 
premises. In other words, moving from universally valid statements , i.e., the two 
main and the minor premise in Aristotle’s syllogism, the conclusion arrived at is 
certainly true. Based on these presuppositions, valid deductive reasoning always 
gives a guarantee: in other words, we can be sure that if the premises are true, then 
the conclusion will be true as well. This is a characteristic of mathematical thought 



4 R. K. Noon, Forensic Engineering Investigation, CRC Press, Boca Raton 2001. 
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which is particularly rich in Euclid’s formulations: in the field of mathematics 5 or 
geometry (which by tradition has been handed down from the ancient Greeks) this 
method is also called axiomatic in that by starting off from statements that are 
certainly true it leads on to the elaboration of complex theories 6 

In other words, by using deductive reasoning it is not possible to extend the 
properties or characteristics of an element, but only to “verify” whether this element 
is equipped with the particularities that have been characterized in the two premises 
that were previously formulated . 7 Yet, does all this mean that the reasoning powers 
of the human mind can never arrive at a new level of consciousness with respect to 
that which has been supplied by the premises? Fortunately for the history of 
scientific theory that is not the case. 

There are, in fact, other forms of reasoning that are not deductive. 

In some cases we discuss matters, reaching conclusions made based on a certain 
number of observations or the elaboration of data. These forms of reasoning are 
called inductive and they are carried out following inferences that proceed in the 
opposite sense to those that are deductive. To get a better grasp of what this consists 
in, let us consider the typical scheme of an inductive inference: 

I saw a crow and it was black 
I saw a second crow and it was black 
I saw the umpteenth crow and it was black 

Crows are probably black 



5 Notice that we are talking here of mathematical methods which are not to be confused with 
scientific methods, even if we consider that mathematics permeates any enquiry of a scientific 
nature. It is obvious that all scientific disciplines have to do with “laws” that are formulated more 
often than not using instruments of a mathematical nature (it is enough to think of the universal 
laws of gravitation elaborated by Newton). Later in the book we will attempt to clarify the subtle 
distinction that exists between mathematical and scientific methods. To do that, however, we need 
to first introduce a new form of reasoning which is not simply deductive. 

6 Euclid begins from an axiomatic system based on definitions (e.g., “a point is that which has no 
parts”; “a line is length without width,” etc.) common notions (e.g., “things which equal the same 
thing equal one another”) which are not directly connected with geometry, and postulates (e.g., 
“postulate: you can conduct a straight line from one point to any other point”) which, instead, have 
to do with geometry. On the basis of this axiomatic system organized around carefully chosen 
definitions , common notions and postulates, Euclid deduces the geometrical theories that are still 
studied in High Schools today. 

7 George Boole 1815-1864, logician and mathematician is considered to be the founder of 
mathematical logics. Boole was the first to study logical deductions formulated in natural language 
through a formal language called, in fact, Boole’s Algebraic Language or Boolean Algebra. Even 
easier to remember are the “symbols” introduced by Eulero in 1787 (L. Eulero, Letters to a 
German Princess, Ferres, Naples, 1787) to carry out logical “operations” in a symbolic but easily 
intuitive fashion. These are the “rings” inside which the “sets” are represented, i.e., classes of types 
with determined characteristics. For example, if we are to represent the main premise in Aristotle’s 
syllogism “all men are mortal” we would draw the ring representing the class “men” in a larger 
circle representing the class “mortal beings.” The minor premise “Socrates is a man” means in the 
theory of sets that “Socrates” is an element of the set “men.” It follows that because he is certainly 
included inside the wider circle, we can deduce that the element Socrates is equipped with the 
same particularities as the set “mortal beings”: thus he is himself unequivocally mortal. 
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As you can see in this simple example inductive reasoning introduces a princi- 
ple: the level of final knowledge is amplified with respect to the information 
(acquired by observation) contained in the premise. In other words, the conclusion 
expects to formulate a general rule from which to be able to predict the result of our 
next observation : the crow that we will see will (probably) be black. 

Because of this particular structure of inductive reasoning it came about in the 
past that Bacon and Hume identified it “the Method” with which to conduct a 
scientific observation. Let us say at once that this very reductive vision of the 
scientific method has been superseded by philosophers of science (first, Popper and 
Pierce) and by twentieth century scientists (Mach, Einstein, Hertz, Kraft), who 
brought to light the errors and the conceptual limits of the inductivists of the Bacon 
and Hume type. 

Going back to our example of the black crows, we notice that the prediction 
about the next result cannot have the character of certainty: this is, in any case, 
already specified in the conclusion: all crows are probably black. That is to say, 
from the information that we have gathered nothing forbids us from thinking that 
we might see one day a particularly rare type of white crow or spotted crow or crow 
of any other color. 

It is a good thing to clarify that, although it is true we had to wait for the 
twentieth century to reach the conclusion that neither of the two proposed reasoning 
schemes is exclusively in possession of the peculiarities of scientific reasoning, this 
does not mean that scientific reasoning had not seen the light until that moment. A 
good three centuries before that, the Pisan Galileo Galilei (1564-1642) had already 
developed it for the first time, and the Englishman Isaac Newton (1642-1727) had 
made further great improvements on it. 

The dilemma was resolved when someone noticed that the scientific method is 
based on both of the methods applied: they are, however, applied as two “phases” of 
a cognitive process that is more complex and articulated, comprising a third form of 
reasoning that we have not as yet introduced. The declination of this further form of 
reasoning was the key to getting beyond the deadlock in the philosophical debate 
over the nature of the scientific method and arriving finally to a turning point. 
Before looking in any detail at the third scheme of logical reasoning, we will first 
summarize the reciprocal positions that were so opposed one to the other that they 
ended up creating a stalemate. In this way we will be better able to understand their 
various nuances. 

- Deductive reasoning gives us the certainty of the conclusion: this is an unde- 
niable advantage for the scientist. On the other hand it is not possible to amplify 
our degree of knowledge of things beyond the level that is already declared in the 
premise from which the inquiry begins; 

- Inductive reasoning allows us to elevate our degree of knowledge with respect 
to the simple observations carried out. On the other hand, we are at the mercy of 
the uncertainty of these conclusions. The result can only be probable, never 
certain: in the scientific field this is not enough. 




The Idea of Demonstration and the Three Forms of Reasoning 
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Among the many illustrious scientists that took part in the debate, Albert 
Einstein expressed himself with clarity on the fact that theories “cannot be obtained 
through a distillation of experiences that have been lived using any inductive 
method, but only through free invention", specifying in support of his theory that: 

The great steps forward in our knowledge of nature have been made following a path that is 
diametrically opposed to the one followed by induction. An intuitive concept ( Erfassung ) 
concerning the essential nature of a large complex of things brings the researcher to the 
proposal ( Aufstellung ) of a hypothetical principle ( Gundgesetz ) or a number of principles 
of that type. From the principle (system of axioms) he deduces in a purely logical - 
deductive way the consequences in the most complete manner possible. These conse- 
quences are extractable from the beginning often through developments and boring calcu- 
lations, and are then compared with the experiences, thus supplying the criteria of 
justification (. Berechtigung ) for the admitted principle. The principle (axioms) and the 
consequences together form what is called a ‘theory’. Every educated person knows that the 
biggest advances in our knowledge of nature - for example, Newton’s theory of gravitation, 
thermodynamics, the kinetic theory of gasses, modem electrodynamics, etc., — have all 
originated in this way [. . .] The researcher, therefore, always begins with the facts [. . .] 

But he does not arrive at his theoretical system in a methodical, inductive way; rather, he 
gets nearer to the facts by making intuitive choices between thinkable theories based on 
axioms. A theory can be recognized as wrong when there is a logical error in its deductions, 
or it can be recognized as inadequate when a fact is not in agreement with one of its 
consequences. 8 

Einstein’s text delineates in clear strokes the cognitive processes on which the 
scientific method is based: we begin with the facts elaborated by using simple 
observations (Galileo, for example, observed the movements of the planets), 9 from 
which we conjecture a hypothesis (the principle in Einstein’s terms) which can give 
a causal explanation of the observations that have been made. 

The researcher reasons in this way, in other words: “if the law that has been 
hypothetically presumed (or the principle , in Einstein’s terms) turns out to be true, 
then the observations carried out would be well-explained.” 

This is a way of reasoning that is profoundly different from the two earlier types 
that we have classified: as distinct from deductive reasoning it does not give any 
guarantee about the truth of the conclusions but it allows for the addition of 
knowledge to the premises and in this sense is similar to induction. 

As distinct from induction, this particular form of reasoning goes beyond a 
general conclusion: starting off from the simple sequence of a series of observations 
(as we have seen in the example of the black crows) we arrive to the formulation of 
a hypothesis about the causes by which we can explain the observations themselves. 
Sometime before Einstein and the other illustrious scientists that gave life to this 
debate, Charles Sanders Peirce, philosopher of scientific thought and method and 
the father of American pragmatism, called this form of reasoning abduction to 



8 A. Einsten, Induktion und Deduktion in der Physik, in Berliner Tageblatt, 25 December 1919. 

9 And here again Galileo constructed a system, the inclined plane (which we will discuss later in 
greater detail in Chap. 3) to carry out experiments in a simplified, controlled “environment,” to 
interpret the results and thus to produce inferences on the observations. 



